Platform Domain (Module 2 Scope)

MUST

REST APIs, Channel Connectors, RBAC Security, Audit Logging, Multi-tenancy & Workspace Administration.

1. REST API Platform

MUST
Target Delivery: Baseline Active

Standardized REST API endpoints (/api/v1/...) with CRUD, search, filtering, and Zod input validation.

Planned Capabilities:
CRUD RoutesJWT AuthorizationPaginationJSON Envelope
Non-fake Roadmap State

2. Connector Framework

MUST
Target Delivery: Baseline Active

Official API connectors for Email, WhatsApp, LinkedIn, Calendar, Voice, and Webhooks.

Planned Capabilities:
Gmail/M365WhatsApp PlatformGoogle CalendarWebhooks
Non-fake Roadmap State

3. Security & Multi-tenancy

MUST
Target Delivery: Baseline Active

RBAC role permissions, session handling, password hashing, and strict database tenant isolation.

Planned Capabilities:
Tenant IsolationRBAC MiddlewareSSO/OIDCSecret Management
Non-fake Roadmap State

4. Security Audit Logs

MUST
Target Delivery: Baseline Active

System audit trail tracking login events, exports, workflow runs, AI agent actions, and role changes.

Planned Capabilities:
Audit TrailActor TrackingIP LoggingExport Audits
Non-fake Roadmap State